Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/CT_dVsabIO-5RNLAqjfybjSBDQ0.roa
File: CT_dVsabIO-5RNLAqjfybjSBDQ0.roa (raw, json)
Hash identifier: Qm4P2OoarX8e3CpjPsynu/0o63bbynCAsvRN7eHntzc=
Subject key identifier: 09:3F:DD:56:C6:9B:20:EF:B9:44:D2:C0:AA:37:F2:6E:34:81:0D:0D
Certificate issuer: /CN=f992d817ec34b4731d8d36c7b094d2b045d0bc7c
Certificate serial: 0187C3DC352B621CDD553F8DC0460DF1FF9C
Authority key identifier: F9:92:D8:17:EC:34:B4:73:1D:8D:36:C7:B0:94:D2:B0:45:D0:BC:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/CT_dVsabIO-5RNLAqjfybjSBDQ0.roa
Signing time: Thu 27 Apr 2023 17:56:41 +0000
ROA not before: Thu 27 Apr 2023 17:56:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51185
IP address blocks: 94.124.64.0/21 maxlen: 21
94.124.67.0/24 maxlen: 24
94.124.65.0/24 maxlen: 24
185.45.208.0/24 maxlen: 24
185.45.209.0/24 maxlen: 24
185.45.210.0/24 maxlen: 24
185.45.211.0/24 maxlen: 24
178.248.52.0/24 maxlen: 24
178.248.53.0/24 maxlen: 24
178.248.54.0/24 maxlen: 24
178.248.55.0/24 maxlen: 24
185.187.156.0/24 maxlen: 24
185.187.159.0/24 maxlen: 24
178.248.48.0/24 maxlen: 24
178.248.49.0/24 maxlen: 24
178.248.50.0/24 maxlen: 24
178.248.51.0/24 maxlen: 24
2a02:2891:13::/48 maxlen: 48
2a02:2891:4::/48 maxlen: 48
2a02:2890::/48 maxlen: 48
2a02:2891:29::/48 maxlen: 48
2a02:2891:10::/48 maxlen: 48
2a02:2890:ffff::/48 maxlen: 48
2a02:2891:15::/48 maxlen: 48
2a02:2891:1::/48 maxlen: 48
2a02:2892:36::/48 maxlen: 48
2a02:2891:12::/48 maxlen: 48
2a02:2891:32::/48 maxlen: 48
2a02:2892:40::/48 maxlen: 48
2a02:2891::/48 maxlen: 48
2a02:2891:40::/48 maxlen: 48
2a02:2892:32::/48 maxlen: 48
2a02:2891:16::/48 maxlen: 48
2a02:2891:11::/48 maxlen: 48
2a02:2891:2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c3:dc:35:2b:62:1c:dd:55:3f:8d:c0:46:0d:f1:ff:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f992d817ec34b4731d8d36c7b094d2b045d0bc7c
Validity
Not Before: Apr 27 17:56:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=093fdd56c69b20efb944d2c0aa37f26e34810d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7b:a3:6a:90:47:30:b8:32:03:d5:7f:a3:20:
ab:0c:f2:23:b5:54:ea:e4:79:fe:c4:44:e2:24:db:
a0:b9:cb:58:26:68:13:92:f9:0c:ad:61:5c:0f:2b:
d5:97:b1:5f:aa:4c:bd:44:48:35:6d:20:97:c2:30:
0f:41:0e:a7:95:53:8c:1b:3a:21:69:bc:2c:9a:23:
df:57:fa:66:42:bd:a8:75:fa:b0:bd:a5:c3:8c:ed:
74:e9:a5:a1:75:7b:04:00:47:a8:b1:7a:6f:30:20:
d2:4c:85:c3:00:72:d4:a8:cf:93:c9:ca:eb:d7:5c:
05:64:51:b1:00:de:c9:47:60:df:ad:bc:f7:d4:a5:
9b:da:91:39:50:31:a5:ff:6b:fb:85:bf:26:6a:e9:
98:93:9c:d4:67:0b:0e:d1:33:a5:ce:3a:1b:53:83:
7f:0f:20:ba:bd:54:ff:e7:36:f4:a2:2f:3f:52:6f:
d1:e9:74:3c:55:98:67:4b:7d:ba:ef:e5:ed:f0:77:
69:2c:20:82:67:ee:55:d0:cb:9a:2d:08:3f:cd:1b:
a4:a1:4a:e6:5f:ff:4e:b7:f5:31:15:8d:2a:54:e2:
31:05:b7:c2:d7:72:de:8d:a5:3b:9c:79:31:31:04:
79:22:48:98:8a:d9:33:18:f6:6d:50:02:af:5e:c9:
fe:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3F:DD:56:C6:9B:20:EF:B9:44:D2:C0:AA:37:F2:6E:34:81:0D:0D
X509v3 Authority Key Identifier:
keyid:F9:92:D8:17:EC:34:B4:73:1D:8D:36:C7:B0:94:D2:B0:45:D0:BC:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/CT_dVsabIO-5RNLAqjfybjSBDQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.64.0/21
178.248.48.0/21
185.45.208.0/22
185.187.156.0/24
185.187.159.0/24
IPv6:
2a02:2890::/48
2a02:2890:ffff::-2a02:2891:2:ffff:ffff:ffff:ffff:ffff
2a02:2891:4::/48
2a02:2891:10::/46
2a02:2891:15::-2a02:2891:16:ffff:ffff:ffff:ffff:ffff
2a02:2891:29::/48
2a02:2891:32::/48
2a02:2891:40::/48
2a02:2892:32::/48
2a02:2892:36::/48
2a02:2892:40::/48
Signature Algorithm: sha256WithRSAEncryption
37:fc:f4:3c:86:4a:48:66:db:0f:a7:a6:47:21:a9:76:14:73:
c4:e4:d4:d0:69:0e:24:ee:b5:bf:c0:e0:a2:09:66:b2:f2:10:
ad:b3:a1:b2:7c:f3:48:1d:e8:80:3a:6b:1f:e0:74:c4:b9:c4:
64:f3:33:62:33:cc:ef:7c:0a:8f:52:64:18:2f:35:35:cf:9e:
fb:af:94:91:35:42:8e:50:c0:ab:f1:dc:28:ea:cc:25:1b:d4:
a6:5d:f5:66:62:96:63:4f:6a:fd:a5:f4:b9:5b:16:ec:03:e9:
bd:11:72:d1:a4:02:88:85:ab:e4:ce:26:de:60:10:49:38:2a:
5b:ed:2a:54:24:a8:9a:f1:5b:76:b3:71:8c:cf:5c:bb:ed:7a:
53:6e:a3:5f:43:d4:cb:51:bb:0c:55:3a:d8:a4:e6:d6:1e:98:
82:92:7e:f4:62:13:7f:d1:1b:c2:e0:49:a3:c5:aa:de:a2:48:
4d:60:00:00:fb:81:77:44:4e:81:4f:a7:66:ba:12:e6:47:7a:
b3:1b:65:28:ea:a4:b6:24:78:2e:ce:ff:de:cf:c2:96:6e:d9:
59:d1:01:81:f0:aa:a7:dc:d6:55:78:c4:26:12:c5:8f:7c:17:
2c:e2:b5:cc:c2:71:f0:04:55:a2:3e:89:a9:67:cb:e7:14:d1:
64:ac:bf:10
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgISAYfD3DUrYhzdVT+NwEYN8f+cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OTJkODE3ZWMzNGI0NzMxZDhkMzZjN2IwOTRkMmIwNDVk
MGJjN2MwHhcNMjMwNDI3MTc1NjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTNmZGQ1NmM2OWIyMGVmYjk0NGQyYzBhYTM3ZjI2ZTM0ODEwZDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHujapBHMLgyA9V/oyCrDPIjtVTq
5Hn+xETiJNuguctYJmgTkvkMrWFcDyvVl7Ffqky9REg1bSCXwjAPQQ6nlVOMGzoh
abwsmiPfV/pmQr2odfqwvaXDjO106aWhdXsEAEeosXpvMCDSTIXDAHLUqM+Tycrr
11wFZFGxAN7JR2Dfrbz31KWb2pE5UDGl/2v7hb8maumYk5zUZwsO0TOlzjobU4N/
DyC6vVT/5zb0oi8/Um/R6XQ8VZhnS3267+Xt8HdpLCCCZ+5V0MuaLQg/zRukoUrm
X/9Ot/UxFY0qVOIxBbfC13LejaU7nHkxMQR5IkiYitkzGPZtUAKvXsn+OQIDAQAB
o4ICpzCCAqMwHQYDVR0OBBYEFAk/3VbGmyDvuUTSwKo38m40gQ0NMB8GA1UdIwQY
MBaAFPmS2BfsNLRzHY02x7CU0rBF0Lx8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1aTFlGLXcwdEhNZGpUYkhzSlRTc0VYUXZIdy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvYjNhMTExLTA4YTAtNDc1ZC1iNjkx
LWJkYzkwYTE1ZjdmMy8xL0NUX2RWc2FiSU8tNVJOTEFxamZ5YmpTQkRRMC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNmUvYjNhMTExLTA4YTAtNDc1ZC1iNjkxLWJkYzkwYTE1Zjdm
My8xLzEtWkxZRi13MHRITWRqVGJIc0pUU3NFWFF2SHcuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwgboGCCsGAQUFBwEHAQH/BIGqMIGnMCQEAgABMB4DBANe
fEADBAOy+DADBAK5LdADBAC5u5wDBAC5u58wfwQCAAIweQMHACoCKJAAADASAwcA
KgIokP//AwcAKgIokQACAwcAKgIokQAEAwcCKgIokQAQMBIDBwAqAiiRABUDBwAq
AiiRABYDBwAqAiiRACkDBwAqAiiRADIDBwAqAiiRAEADBwAqAiiSADIDBwAqAiiS
ADYDBwAqAiiSAEAwDQYJKoZIhvcNAQELBQADggEBADf89DyGSkhm2w+npkchqXYU
c8Tk1NBpDiTutb/A4KIJZrLyEK2zobJ880gd6IA6ax/gdMS5xGTzM2IzzO98Co9S
ZBgvNTXPnvuvlJE1Qo5QwKvx3CjqzCUb1KZd9WZilmNPav2l9LlbFuwD6b0RctGk
AoiFq+TOJt5gEEk4KlvtKlQkqJrxW3azcYzPXLvtelNuo19D1MtRuwxVOtik5tYe
mIKSfvRiE3/RG8LgSaPFqt6iSE1gAAD7gXdEToFPp2a6EuZHerMbZSjqpLYkeC7O
/97PwpZu2VnRAYHwqqfc1lV4xCYSxY98FyzitczCcfAEVaI+ialny+cU0WSsvxA=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:19 2023 by rpki-client on console-ams.rpki-client.org